Director, Information Security Office Consultant

Capital One • McLean, VA

7d

About The Position

Capital One is seeking a cybersecurity professional to drive cybersecurity governance, capability maturation, and risk transformation. The role provides strategic leadership and coaching to managers and associates, advises on cybersecurity best practices, and leads enterprise risk reduction and cross-functional cyber governance initiatives. It evaluates cybersecurity capabilities, risks, threats, and maturity, and communicates gaps and remediation options to stakeholders and leadership to support strategic planning and business decisions.

Requirements

• Bachelor's degree.
• At least 9 years of experience in cybersecurity or information technology.
• At least 8 years of experience evaluating, contributing to, or supporting the development of cybersecurity capabilities.

Nice To Haves

• 9+ years of experience with cybersecurity frameworks and concepts such as NIST CSF, MITRE ATT&CK, CMMC, or FedRAMP.
• 9+ years of experience analyzing or developing solutions for cyber threats, vulnerabilities, risks, or events.
• 9+ years of experience working on teams and presenting cybersecurity information—such as metrics, threat intelligence, controls, or requirements—to stakeholders.
• 8+ years of experience working in multi-cloud environments.
• 8+ years of experience using security tools such as Splunk, CrowdStrike, Qualys, or AWS Security Hub.
• 6+ years of experience with data ecosystems, applications, privacy, and compliance.
• 6+ years of experience with API security.
• 5+ years of experience with DataLake and consumption tools.
• 5+ years of experience with file transfer systems.
• 5+ years of experience integrating SaaS products into an enterprise environment.
• 5+ years of people management experience.
• 4+ years of experience developing or interpreting cybersecurity metrics or dashboards.
• 4+ years of experience developing and overseeing cybersecurity or technology risk programs.
• Familiarity with industry risk governance or financial risk governance processes.
• Ability to perform security incident analysis and assist with resolution, translating technical findings into clear, actionable reports for technical and non-technical stakeholders.

Responsibilities

• Provide strategic leadership and coaching to senior managers and associates, set direction, develop talent, and build a high-performing cybersecurity organization.
• Serve as a cybersecurity subject matter expert and advise on risk-reduction best practices through configuration of cybersecurity tools and platforms.
• Support development, modification, and use of capability, risk, and threat classification frameworks and standardization methodologies for capability, maturity, and effectiveness evaluations.
• Support continuous improvement programs, including risk and issue identification, corrective action implementation, and results validation.
• Identify and operationalize cross-programmatic linkages among threats and risks, controls and capabilities and tooling, and data analytics to support initiative prioritization and spending and resource-allocation decisions.
• Lead solutioning for and manage activities in response to large-scale enterprise risk-reduction efforts.
• Communicate the impact of operational, compliance, process, control, and tooling gaps and potential remediation actions to audiences including leadership.
• Oversee enterprise-level cybersecurity risk assessments and maturity evaluations, integrating results into strategic planning and business decision-making.
• Direct cross-functional cyber governance initiatives to align risk management, engineering, and compliance with organizational strategy.

Benefits

• Comprehensive health, financial, and other benefits supporting total well-being; eligibility varies by employment status and management level.
• Eligible for performance-based incentive compensation, which may include cash bonuses and/or long-term incentives.

What This Job Offers

• Job Type: Full-time
• Career Level: Director